$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AERg_5qrQ23pjeitxrN45Bw2sc0.roa File: AERg_5qrQ23pjeitxrN45Bw2sc0.roa (raw, json) Hash identifier: M1k/RLtVO0sprf8Z70nf6a4k/qc2Q3UQqGnQ5NdwDYI= Subject key identifier: 00:44:60:FF:9A:AB:43:6D:E9:8D:E8:AD:C6:B3:78:E4:1C:36:B1:CD Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2B08 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AERg_5qrQ23pjeitxrN45Bw2sc0.roa Signing time: Fri 01 Sep 2023 10:09:47 +0000 ROA not before: Fri 01 Sep 2023 10:09:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.232.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11016 (0x2b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:09:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=004460FF9AAB436DE98DE8ADC6B378E41C36B1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:24:ae:12:fd:52:6e:7c:6e:39:f8:c9:ff: 86:bf:6a:61:c1:ee:21:cf:d2:36:7e:44:ec:70:85: 42:0f:8d:bf:e6:4b:07:d7:c8:0f:57:21:c5:fe:7a: 80:66:06:33:a5:34:45:ab:dc:57:b9:d1:4f:90:33: 0c:da:a0:c9:32:6b:d0:c0:c7:21:0c:36:a9:71:de: 57:f8:3b:8f:80:7a:00:e0:c8:3a:38:36:7b:d1:76: 11:e5:dc:57:a5:70:47:28:66:86:34:d4:0e:63:15: 9f:00:ed:ba:a5:11:02:6d:3d:c9:1f:06:16:ea:70: 04:23:96:87:16:4c:30:75:91:0d:62:22:3d:c2:08: c2:fa:0f:f0:b5:7d:83:ae:a8:dc:89:3e:a3:bb:c9: 71:9e:4f:54:b0:51:34:99:9d:af:d6:87:45:cc:89: 80:3b:d8:d7:23:09:c9:1e:14:eb:1d:e4:36:4c:ed: da:c6:b9:ac:98:93:10:12:56:52:a8:61:a2:f6:e3: a6:57:aa:18:04:b8:4e:39:97:f1:00:34:3b:23:40: 1e:00:6f:4f:39:bc:06:06:65:ca:31:01:89:84:67: 85:3e:1c:5d:95:d8:e1:c7:36:ef:f2:79:cc:a4:cf: 31:36:d1:2f:bc:8a:8b:ed:3d:b2:a3:f1:4e:68:6f: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:44:60:FF:9A:AB:43:6D:E9:8D:E8:AD:C6:B3:78:E4:1C:36:B1:CD X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AERg_5qrQ23pjeitxrN45Bw2sc0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.8.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:27:d6:78:a0:d8:ef:86:96:b9:ca:b8:fe:f0:c2:0c:8e:75: 60:01:47:01:56:e5:38:c0:40:6a:d3:c5:4d:91:f3:d5:01:3c: d1:3e:ac:6d:63:4c:a4:f2:d1:0d:e6:0a:80:d7:61:0c:b3:d2: 2c:f6:21:45:15:ea:20:ac:ae:7a:bd:90:59:d7:e9:de:23:3d: 15:77:55:1f:da:d0:ff:40:3e:1b:e7:4e:d1:d7:0a:5d:d4:cd: a3:cb:1c:ca:62:fd:ad:6d:b1:ce:d3:fd:ae:2e:77:00:64:7f: f9:ee:35:ba:46:eb:01:95:26:cf:d1:b9:4c:28:6f:ac:57:23: 2a:19:e8:24:e7:c4:9a:43:67:86:a8:7f:86:76:26:1c:17:7d: f4:e8:fe:ee:12:ad:e8:5a:c5:68:2d:22:d9:6d:aa:f7:9a:0c: 28:65:25:71:81:fa:57:45:01:d6:57:fd:67:e2:09:a4:c3:78: f0:c3:31:1a:48:19:81:19:28:75:c4:e0:c8:0e:c6:e4:73:1a: b8:20:e4:67:cc:65:63:d2:09:46:64:7a:2f:61:bc:81:4c:40: e8:00:44:e3:c3:bf:da:29:e7:0d:5a:5a:a2:7a:e6:00:b0:0e: a5:f4:db:78:85:b1:04:11:92:98:8f:ac:16:da:4c:0d:b0:01: 7b:f6:ba:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA5NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwNDQ2MEZGOUFBQjQz NkRFOThERThBREM2QjM3OEU0MUMzNkIxQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvBSSuEv1SbnxuOfjJ/4a/amHB7iHP0jZ+ROxwhUIPjb/mSwfX yA9XIcX+eoBmBjOlNEWr3Fe50U+QMwzaoMkya9DAxyEMNqlx3lf4O4+AegDgyDo4 NnvRdhHl3FelcEcoZoY01A5jFZ8A7bqlEQJtPckfBhbqcAQjlocWTDB1kQ1iIj3C CML6D/C1fYOuqNyJPqO7yXGeT1SwUTSZna/Wh0XMiYA72NcjCckeFOsd5DZM7drG uayYkxASVlKoYaL246ZXqhgEuE45l/EANDsjQB4Ab085vAYGZcoxAYmEZ4U+HF2V 2OHHNu/yecykzzE20S+8iovtPbKj8U5ob0c9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUAERg/5qrQ23pjeitxrN45Bw2sc0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FFUmdfNXFyUTIzcGplaXR4 ck40NUJ3MnNjMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2 6AgwDQYJKoZIhvcNAQELBQADggEBAAon1nig2O+GlrnKuP7wwgyOdWABRwFW5TjA QGrTxU2R89UBPNE+rG1jTKTy0Q3mCoDXYQyz0iz2IUUV6iCsrnq9kFnX6d4jPRV3 VR/a0P9APhvnTtHXCl3UzaPLHMpi/a1tsc7T/a4udwBkf/nuNbpG6wGVJs/RuUwo b6xXIyoZ6CTnxJpDZ4aof4Z2JhwXffTo/u4SrehaxWgtItltqveaDChlJXGB+ldF AdZX/WfiCaTDePDDMRpIGYEZKHXE4MgOxuRzGrgg5GfMZWPSCUZkei9hvIFMQOgA ROPDv9op5w1aWqJ65gCwDqX023iFsQQRkpiPrBbaTA2wAXv2usw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org